Outlier Detection in Smart Grid Communication

TL;DR

This paper discusses the importance of detecting internal cyber threats in smart grid ICS networks, emphasizing the limitations of traditional security tools and the need for specialized outlier detection methods.

Contribution

It highlights the necessity of analyzing internal ICS communication behavior for effective outlier detection in smart grid security.

Findings

Traditional security tools are insufficient for internal threat detection.

Behavior analysis of ICS communication can identify cyber attacks.

Focus on outlier detection enhances smart grid cybersecurity.

Abstract

Industrial Control System (ICS) networks transmit control and monitoring data in critical environments such as smart grid. Cyber attacks on smart grid communication may cause fatal consequences on energy production, distribution, and eventually the lives of people. Since the attacks can be initiated from both the inside and outside of the network, traditional smart grid security tools like firewalls or Intrusion Detection Systems (IDS), which are typically deployed on the edge of the network, are not able to detect internal threats. For this reason, we also need to analyze behavior of internal ICS communication.